-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 25 Aug 2025 19:30:10 +0800
Source: libxml2
Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym
Architecture: arm64
Version: 2.9.14+dfsg-1.3~deb12u4
Distribution: bookworm-security
Urgency: high
Maintainer: arm Build Daemon (arm-conova-03) <buildd_arm64-arm-conova-03@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libxml2    - GNOME XML library
 libxml2-dev - GNOME XML library - development files
 libxml2-utils - GNOME XML library - utilities
 python3-libxml2 - GNOME XML library - Python3 bindings
Closes: 1109122
Changes:
 libxml2 (2.9.14+dfsg-1.3~deb12u4) bookworm-security; urgency=high
 .
   * CVE-2025-7425: heap-use-after-free in xmlFreeID caused by `atype`
     corruption (Closes: #1109122)
Checksums-Sha1:
 efed0f9ecb60bb2f0fb20a420fa5a2a025bb1e4f 1868120 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_arm64.deb
 380e0319f22ad58fbc1cdc20737515ef4850bfe1 740948 libxml2-dev_2.9.14+dfsg-1.3~deb12u4_arm64.deb
 090c6ffe6f377695952004e25b48586e8f070e65 80184 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_arm64.deb
 2c67f21908268824fb30265f9f9ec0bc3d338b7d 97760 libxml2-utils_2.9.14+dfsg-1.3~deb12u4_arm64.deb
 fe8da2784a9e931cd2e8b3932252a36e56c325b9 9186 libxml2_2.9.14+dfsg-1.3~deb12u4_arm64-buildd.buildinfo
 ddc453d3671198080075ac745e871594a201278d 619916 libxml2_2.9.14+dfsg-1.3~deb12u4_arm64.deb
 9d10ad59b3558c09071d625f2bc01c21b402f444 241212 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_arm64.deb
 80786ed1391f14789005132e9f25405eb19cc478 184692 python3-libxml2_2.9.14+dfsg-1.3~deb12u4_arm64.deb
Checksums-Sha256:
 8b329c08bdbd31d1fd81b474b237537b130f99633505a97b141950549085e7c0 1868120 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_arm64.deb
 1489da3b38993e8d463b68c52d749c6fc81d05d1d3362c3826012bd179358f9d 740948 libxml2-dev_2.9.14+dfsg-1.3~deb12u4_arm64.deb
 8b92bf23a1e3dd7114537fd5896da6f5bba72096392786690169417fe8b8de82 80184 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_arm64.deb
 f3cff148b97b0130b5994156d9ea2db997d811044b14257c4bb7245fcd810148 97760 libxml2-utils_2.9.14+dfsg-1.3~deb12u4_arm64.deb
 43472b6efd9d2e5831a096ff2c9a8ed90f10f96161f0a8d4b7125bc58e90be14 9186 libxml2_2.9.14+dfsg-1.3~deb12u4_arm64-buildd.buildinfo
 e2f98689f3154d2a9c9c16dc20c1b69ca09bc4994e7c9a5353acd92f19ef20c6 619916 libxml2_2.9.14+dfsg-1.3~deb12u4_arm64.deb
 b32b2c64ee7b61ba1f1a43a6b6937360a40de9cafaaa681d072d1305e356ee6f 241212 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_arm64.deb
 fc8d1f93cf5499698cb1b5cdb89798664f1219d24a84c69363c76d7b32513052 184692 python3-libxml2_2.9.14+dfsg-1.3~deb12u4_arm64.deb
Files:
 0d0c0a5d8decf9bc49027572aa0bbf3e 1868120 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_arm64.deb
 797d69dfaf0b1cdcd578818f856ef1ac 740948 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u4_arm64.deb
 6f585f18cd4726333ef136ad59109c94 80184 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_arm64.deb
 b22aeeb4c27e2346c8693d8f1554a641 97760 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u4_arm64.deb
 61818762eb70c3a9dd0930d20b997fd4 9186 libs optional libxml2_2.9.14+dfsg-1.3~deb12u4_arm64-buildd.buildinfo
 cf107f2d5a09ce249410ad3129fb8feb 619916 libs optional libxml2_2.9.14+dfsg-1.3~deb12u4_arm64.deb
 30a86dc372ffa2f2962b73307fd05164 241212 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_arm64.deb
 8750bf566d52528c7774455bbf1fcff0 184692 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u4_arm64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEVM4SKBZumztS8zr3lST9Us03ywsFAmisUFEACgkQlST9Us03
ywsexxAAldS2GwQ+l8fzxnQl5MwzP0Rbk4xGUEuOXTvS4Qz8lzZJciXaUTrHIqD8
IG1JYzp5FycbzntVpxxJas4/oX5eLZ3uEzswHwkHKKdWk5XcSWJii+tazaqOgT5f
E6bKbGMDmTW8Vinp1/UDqnCQRwNO4tdKq5zSCYU298G1PdWBDWmLcpuMZMvGi9Ai
S66VgCDWJ8iTHpUcEOAjYTDVeieEAKW10VhVlnV4GfC5R7RjEOKevuhLTsCBcDbc
fpPqzDzAE6X7HjmVSNa00HG9816tjE94I3eE8+olupoYeamzvNi5UXY6yyLFB50o
yXDwx8OiEoNSLoLp531qeGc6NCnCgtjKzlwTo2l2MFnlCRca7VrBr2TNWkSTIsiU
dYs4WEr2KOeJS1FbWNYwK/k8j7Kdeq3AHs9veK8wzMOGX9+Wbzm3u26D1zDoGqrt
iGWmbecUljqb8sKE6RWb9Sbqo8YSZYyUKFGWAth2CpsF3tqOL7jds5TqbXs+K73h
sg/JfL0cQiePd0Ip8/rv37oJ+o/8mbtBIsQg37clCcNvbCzblMCt5m9UC/+Hnyh2
CJ+BnymNNcsXZrm6baW/SWp0kUGP9a/s7WCng4PuG0QoGMi7HQRqPVsEes9WJ27G
CXiXuhtYhRgHPzdNy2tLWmoGl2Q6n1Tb1wCtkNKccYygKHN1uCE=
=/0qb
-----END PGP SIGNATURE-----